(PVS) Signatures - Tenable Network Security

'USERNAME' parameter of the 'login.php' script is not properly sanitized. A remote,
unauthenticated attacker could exploit this to execute arbitrary SQL queries.
Solution: Upgrade to Symantec Web Gateway version 4.5.0.376 or later.
CVE-2010-0115
Symantec Web Gateway forget.php Blind SQL Injection (SYM11-008)
PVS ID: 5991 FAMILY: CGI RISK: HIGH NESSUS ID:55629
Description: Synopsis : \n\nThe web security application running on the remote host has a SQL injection
vulnerability.\n\nFor your information, the observed version of Symantec Web Gateway
installed on the remote host : \n %L \n\nVersions of Symantec Web Gateway 4.5.x are
potentially affected by a SQL injection vulnerability. Input to the 'username' parameter of
the 'forget.php' script is not properly sanitized. A remote, unauthenticated attacker could
exploit this to execute arbitrary SQL queries.
Solution: Upgrade to Symantec Web Gateway version 5.0.1 or later.
CVE-2011-0549
Safari < 5.1 Multiple Vulnerabilities
PVS ID: 5992 FAMILY: Web Clients RISK: HIGH NESSUS ID:55369
Description: Synopsis :\n\nThe remote host contains a web browser that is vulnerable to multiple attack
vectors.\n\nThe remote host has Safari installed. For your information, the observed version
of Safari is %L.\n\nVersions of Safari earlier than 5.1 are potentially affected by several
issues in the following component :\n\n - CFNetwork\n\n - ColorSync\n\n -
CoreFoundation\n\n - CoreGraphics\n\n - International Components for Unicode\n\n -
ImageIO\n\n - libxslt\n\n - libxml\n\n - Safari\n\n - WebKit
Solution: Upgrade to Safari 5.1 or later.
CVE-2011-1797
Apple iOS < 4.2.10 / 4.3.5 Data Security Certificate Verification Vulnerability
PVS ID: 5993 FAMILY: Mobile Devices
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is affected by a security bypass vulnerability.\n\nThe
remote host is an iPhone, iPod Touch, or iPad running iOS. For your information, the
observed version of iOS is : \n %L \n\nVersions of iOS 3.0 through 4.3.4 for iPhone, 3.1
through 4.3.4 for the iPod touch, and 3.2 through 4.3.4 for the iPad are potentially affected
by a security bypass vulnerability due to a certificate chain validation issue in the handling
of X.509 certificates.
Solution: Upgrade to iOS 4.2.10, 4.3.5, or later.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1632